OWASP Web Goat seems to still be a current project, unlike the others I used to know ... https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project Should we plan to show this off first? -- Jim Cheetham jim at cheetham.nz